heartles
/
egirlskey
1
0
Fork 0
Code Issues 1 Pull Requests Packages Projects Releases Wiki Activity

Create requireCredentialSecureMode 

`requireCredentialSecureMode` is a replacement for `requireCredential` as
a three-valued enum. Keeping `requireCredential` as a boolean makes future
merges easier, and whether the endpoint should be allowed in secure mode
is determined by `requireCredentialSecureMode`. This implies that
`requireCredential: true, requireCredentialSecureMode: false` is an invalid
value.
This commit is contained in:
jaina heartles 2024-03-03 16:51:39 -08:00
parent 2e8420d2e9
commit 27e6714827
384 changed files with 768 additions and 379 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
packages/backend/src/server/api/ApiCallService.ts
View File

@ -272,8 +272,7 @@ export class ApiCallService implements OnApplicationShutdown {
}
}
const requireCredential = (ep.meta.requireCredential === 'always' ||
(ep.meta.requireCredential === 'conditional' && this.config.secureApiMode));
const requireCredential = (ep.meta.requireCredential || (ep.meta.requireCredentialSecureMode && this.config.secureApiMode));
if (requireCredential || ep.meta.requireModerator || ep.meta.requireAdmin) {
if (user == null) {
throw new ApiError({

6
packages/backend/src/server/api/endpoint-base.ts
View File

@ -28,16 +28,16 @@ type File = {
// TODO: paramsの型をT['params']のスキーマ定義から推論する
type Executor<T extends IEndpointMeta, Ps extends Schema> =
(params: SchemaType<Ps>, user: T['requireCredential'] extends 'always' ? MiLocalUser : MiLocalUser | null, token: MiAccessToken | null, file?: File, cleanup?: () => any, ip?: string | null, headers?: Record<string, string> | null) =>
(params: SchemaType<Ps>, user: T['requireCredential'] extends true ? MiLocalUser : MiLocalUser | null, token: MiAccessToken | null, file?: File, cleanup?: () => any, ip?: string | null, headers?: Record<string, string> | null) =>
Promise<T['res'] extends undefined ? Response : SchemaType<NonNullable<T['res']>>>;
export abstract class Endpoint<T extends IEndpointMeta, Ps extends Schema> {
public exec: (params: any, user: T['requireCredential'] extends 'always' ? MiLocalUser : MiLocalUser | null, token: MiAccessToken | null, file?: File, ip?: string | null, headers?: Record<string, string> | null) => Promise<any>;
public exec: (params: any, user: T['requireCredential'] extends true ? MiLocalUser : MiLocalUser | null, token: MiAccessToken | null, file?: File, ip?: string | null, headers?: Record<string, string> | null) => Promise<any>;
constructor(meta: T, paramDef: Ps, cb: Executor<T, Ps>) {
const validate = ajv.compile(paramDef);
this.exec = (params: any, user: T['requireCredential'] extends 'always' ? MiLocalUser : MiLocalUser | null, token: MiAccessToken | null, file?: File, ip?: string | null, headers?: Record<string, string> | null) => {
this.exec = (params: any, user: T['requireCredential'] extends true ? MiLocalUser : MiLocalUser | null, token: MiAccessToken | null, file?: File, ip?: string | null, headers?: Record<string, string> | null) => {
let cleanup: undefined | (() => void) = undefined;
if (meta.requireFile) {

13
packages/backend/src/server/api/endpoints.ts
View File

@ -791,7 +791,12 @@ interface IEndpointMetaBase {
* このエンドポイントにリクエストするのにユーザー情報が必須か否か
* 省略した場合は false として解釈されます。
*/
readonly requireCredential?: 'always' | 'conditional' | 'never';
readonly requireCredential?: boolean;
/**
* Should a credential be required when the server is in secureApiMode
*/
readonly requireCredentialSecureMode?: boolean;
/**
* isModeratorなロールを必要とするか
@ -871,14 +876,14 @@ interface IEndpointMetaBase {
readonly cacheSec?: number;
}
export type IEndpointMeta = (Omit<IEndpointMetaBase, 'requireCrential' | 'requireModerator' | 'requireAdmin'> & {
requireCredential?: 'conditional',
export type IEndpointMeta = (Omit<IEndpointMetaBase, 'requireCredential' | 'requireModerator' | 'requireAdmin'> & {
requireCredential?: false,
requireAdmin?: false,
requireModerator?: false,
}) | (Omit<IEndpointMetaBase, 'secure'> & {
secure: true,
}) | (Omit<IEndpointMetaBase, 'requireCredential' | 'kind'> & {
requireCredential: 'always',
requireCredential: true,
kind: (typeof permissions)[number],
}) | (Omit<IEndpointMetaBase, 'requireModerator' | 'kind'> & {
requireModerator: true,

3
packages/backend/src/server/api/endpoints/admin/abuse-user-reports.ts
View File

@ -13,7 +13,8 @@ import { AbuseUserReportEntityService } from '@/core/entities/AbuseUserReportEnt
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'read:admin:abuse-user-reports',

3
packages/backend/src/server/api/endpoints/admin/accounts/create.ts
View File

@ -17,7 +17,8 @@ import { Packed } from '@/misc/json-schema.js';
export const meta = {
tags: ['admin'],
requireCredential: 'never',
requireCredential: false,
requireCredentialSecureMode: false,
res: {
type: 'object',

3
packages/backend/src/server/api/endpoints/admin/accounts/delete.ts
View File

@ -14,7 +14,8 @@ import { UserEntityService } from '@/core/entities/UserEntityService.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireAdmin: true,
kind: 'write:admin:account',
} as const;

3
packages/backend/src/server/api/endpoints/admin/accounts/find-by-email.ts
View File

@ -13,7 +13,8 @@ import { ApiError } from '@/server/api/error.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireAdmin: true,
kind: 'read:admin:account',

3
packages/backend/src/server/api/endpoints/admin/ad/create.ts
View File

@ -13,7 +13,8 @@ import { ModerationLogService } from '@/core/ModerationLogService.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'write:admin:ad',
res: {

3
packages/backend/src/server/api/endpoints/admin/ad/delete.ts
View File

@ -13,7 +13,8 @@ import { ApiError } from '../../../error.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'write:admin:ad',

3
packages/backend/src/server/api/endpoints/admin/ad/list.ts
View File

@ -12,7 +12,8 @@ import { DI } from '@/di-symbols.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'read:admin:ad',
res: {

3
packages/backend/src/server/api/endpoints/admin/ad/update.ts
View File

@ -13,7 +13,8 @@ import { ApiError } from '../../../error.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'write:admin:ad',

3
packages/backend/src/server/api/endpoints/admin/announcements/create.ts
View File

@ -10,7 +10,8 @@ import { AnnouncementService } from '@/core/AnnouncementService.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'write:admin:announcements',

3
packages/backend/src/server/api/endpoints/admin/announcements/delete.ts
View File

@ -13,7 +13,8 @@ import { ApiError } from '../../../error.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'write:admin:announcements',

3
packages/backend/src/server/api/endpoints/admin/announcements/list.ts
View File

@ -14,7 +14,8 @@ import { IdService } from '@/core/IdService.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'read:admin:announcements',

3
packages/backend/src/server/api/endpoints/admin/announcements/update.ts
View File

@ -13,7 +13,8 @@ import { ApiError } from '../../../error.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'write:admin:announcements',

3
packages/backend/src/server/api/endpoints/admin/approve-user.ts
View File

@ -8,7 +8,8 @@ import { EmailService } from '@/core/EmailService.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'write:admin:approve-user',
} as const;

3
packages/backend/src/server/api/endpoints/admin/avatar-decorations/create.ts
View File

@ -10,7 +10,8 @@ import { AvatarDecorationService } from '@/core/AvatarDecorationService.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireRolePolicy: 'canManageAvatarDecorations',
kind: 'write:admin:avatar-decorations',
} as const;

3
packages/backend/src/server/api/endpoints/admin/avatar-decorations/delete.ts
View File

@ -12,7 +12,8 @@ import { ApiError } from '../../../error.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireRolePolicy: 'canManageAvatarDecorations',
kind: 'write:admin:avatar-decorations',
errors: {

3
packages/backend/src/server/api/endpoints/admin/avatar-decorations/list.ts
View File

@ -15,7 +15,8 @@ import { AvatarDecorationService } from '@/core/AvatarDecorationService.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireRolePolicy: 'canManageAvatarDecorations',
kind: 'read:admin:avatar-decorations',

3
packages/backend/src/server/api/endpoints/admin/avatar-decorations/update.ts
View File

@ -12,7 +12,8 @@ import { ApiError } from '../../../error.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireRolePolicy: 'canManageAvatarDecorations',
kind: 'write:admin:avatar-decorations',

3
packages/backend/src/server/api/endpoints/admin/delete-account.ts
View File

@ -12,7 +12,8 @@ import { DI } from '@/di-symbols.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireAdmin: true,
kind: 'write:admin:delete-account',
} as const;

3
packages/backend/src/server/api/endpoints/admin/delete-all-files-of-a-user.ts
View File

@ -12,7 +12,8 @@ import { DI } from '@/di-symbols.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireAdmin: true,
kind: 'write:admin:delete-all-files-of-a-user',
} as const;

3
packages/backend/src/server/api/endpoints/admin/drive/clean-remote-files.ts
View File

@ -10,7 +10,8 @@ import { QueueService } from '@/core/QueueService.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'write:admin:drive',
} as const;

3
packages/backend/src/server/api/endpoints/admin/drive/cleanup.ts
View File

@ -13,7 +13,8 @@ import { DI } from '@/di-symbols.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'write:admin:drive',
} as const;

3
packages/backend/src/server/api/endpoints/admin/drive/files.ts
View File

@ -13,7 +13,8 @@ import { DriveFileEntityService } from '@/core/entities/DriveFileEntityService.j
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'read:admin:drive',

3
packages/backend/src/server/api/endpoints/admin/drive/show-file.ts
View File

@ -14,7 +14,8 @@ import { ApiError } from '../../../error.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'read:admin:drive',

3
packages/backend/src/server/api/endpoints/admin/emoji/add-aliases-bulk.ts
View File

@ -10,7 +10,8 @@ import { CustomEmojiService } from '@/core/CustomEmojiService.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireRolePolicy: 'canManageCustomEmojis',
kind: 'write:admin:emoji',
} as const;

3
packages/backend/src/server/api/endpoints/admin/emoji/add.ts
View File

@ -14,7 +14,8 @@ import { ApiError } from '../../../error.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireRolePolicy: 'canManageCustomEmojis',
kind: 'write:admin:emoji',

3
packages/backend/src/server/api/endpoints/admin/emoji/copy.ts
View File

@ -17,7 +17,8 @@ import { ApiError } from '../../../error.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireRolePolicy: 'canManageCustomEmojis',
kind: 'write:admin:emoji',

3
packages/backend/src/server/api/endpoints/admin/emoji/delete-bulk.ts
View File

@ -10,7 +10,8 @@ import { CustomEmojiService } from '@/core/CustomEmojiService.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireRolePolicy: 'canManageCustomEmojis',
kind: 'write:admin:emoji',
} as const;

3
packages/backend/src/server/api/endpoints/admin/emoji/delete.ts
View File

@ -10,7 +10,8 @@ import { CustomEmojiService } from '@/core/CustomEmojiService.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireRolePolicy: 'canManageCustomEmojis',
kind: 'write:admin:emoji',

3
packages/backend/src/server/api/endpoints/admin/emoji/import-zip.ts
View File

@ -9,7 +9,8 @@ import { QueueService } from '@/core/QueueService.js';
export const meta = {
secure: true,
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireRolePolicy: 'canManageCustomEmojis',
} as const;

3
packages/backend/src/server/api/endpoints/admin/emoji/list-remote.ts
View File

@ -15,7 +15,8 @@ import { sqlLikeEscape } from '@/misc/sql-like-escape.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireRolePolicy: 'canManageCustomEmojis',
kind: 'read:admin:emoji',

3
packages/backend/src/server/api/endpoints/admin/emoji/list.ts
View File

@ -15,7 +15,8 @@ import { EmojiEntityService } from '@/core/entities/EmojiEntityService.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireRolePolicy: 'canManageCustomEmojis',
kind: 'read:admin:emoji',

3
packages/backend/src/server/api/endpoints/admin/emoji/remove-aliases-bulk.ts
View File

@ -10,7 +10,8 @@ import { CustomEmojiService } from '@/core/CustomEmojiService.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireRolePolicy: 'canManageCustomEmojis',
kind: 'write:admin:emoji',
} as const;

3
packages/backend/src/server/api/endpoints/admin/emoji/set-aliases-bulk.ts
View File

@ -10,7 +10,8 @@ import { CustomEmojiService } from '@/core/CustomEmojiService.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireRolePolicy: 'canManageCustomEmojis',
kind: 'write:admin:emoji',
} as const;

3
packages/backend/src/server/api/endpoints/admin/emoji/set-category-bulk.ts
View File

@ -10,7 +10,8 @@ import { CustomEmojiService } from '@/core/CustomEmojiService.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireRolePolicy: 'canManageCustomEmojis',
kind: 'write:admin:emoji',
} as const;

3
packages/backend/src/server/api/endpoints/admin/emoji/set-license-bulk.ts
View File

@ -10,7 +10,8 @@ import { CustomEmojiService } from '@/core/CustomEmojiService.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireRolePolicy: 'canManageCustomEmojis',
kind: 'write:admin:emoji',
} as const;

3
packages/backend/src/server/api/endpoints/admin/emoji/update.ts
View File

@ -13,7 +13,8 @@ import { ApiError } from '../../../error.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireRolePolicy: 'canManageCustomEmojis',
kind: 'write:admin:emoji',

3
packages/backend/src/server/api/endpoints/admin/federation/delete-all-files.ts
View File

@ -12,7 +12,8 @@ import { DI } from '@/di-symbols.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'write:admin:federation',
} as const;

3
packages/backend/src/server/api/endpoints/admin/federation/refresh-remote-instance-metadata.ts
View File

@ -13,7 +13,8 @@ import { DI } from '@/di-symbols.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'write:admin:federation',
} as const;

3
packages/backend/src/server/api/endpoints/admin/federation/remove-all-following.ts
View File

@ -12,7 +12,8 @@ import { QueueService } from '@/core/QueueService.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'write:admin:federation',
} as const;

3
packages/backend/src/server/api/endpoints/admin/federation/update-instance.ts
View File

@ -14,7 +14,8 @@ import { ModerationLogService } from '@/core/ModerationLogService.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'write:admin:federation',
} as const;

3
packages/backend/src/server/api/endpoints/admin/get-index-stats.ts
View File

@ -9,7 +9,8 @@ import { Endpoint } from '@/server/api/endpoint-base.js';
import { DI } from '@/di-symbols.js';
export const meta = {
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireAdmin: true,
kind: 'read:admin:index-stats',

3
packages/backend/src/server/api/endpoints/admin/get-table-stats.ts
View File

@ -9,7 +9,8 @@ import { Endpoint } from '@/server/api/endpoint-base.js';
import { DI } from '@/di-symbols.js';
export const meta = {
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireAdmin: true,
kind: 'read:admin:table-stats',

3
packages/backend/src/server/api/endpoints/admin/get-user-ips.ts
View File

@ -12,7 +12,8 @@ import { IdService } from '@/core/IdService.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'read:admin:user-ips',
res: {

3
packages/backend/src/server/api/endpoints/admin/invite/create.ts
View File

@ -16,7 +16,8 @@ import { ApiError } from '../../../error.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'write:admin:invite-codes',

3
packages/backend/src/server/api/endpoints/admin/invite/list.ts
View File

@ -12,7 +12,8 @@ import { DI } from '@/di-symbols.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'read:admin:invite-codes',

3
packages/backend/src/server/api/endpoints/admin/meta.ts
View File

@ -13,7 +13,8 @@ import { DEFAULT_POLICIES } from '@/core/RoleService.js';
export const meta = {
tags: ['meta'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireAdmin: true,
kind: 'read:admin:meta',

3
packages/backend/src/server/api/endpoints/admin/nsfw-user.ts
View File

@ -6,7 +6,8 @@ import { DI } from '@/di-symbols.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'write:admin:nsfw-user',
} as const;

3
packages/backend/src/server/api/endpoints/admin/promo/create.ts
View File

@ -13,7 +13,8 @@ import { ApiError } from '../../../error.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'write:admin:promo',

3
packages/backend/src/server/api/endpoints/admin/queue/clear.ts
View File

@ -11,7 +11,8 @@ import { QueueService } from '@/core/QueueService.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'write:admin:queue',
} as const;

3
packages/backend/src/server/api/endpoints/admin/queue/deliver-delayed.ts
View File

@ -11,7 +11,8 @@ import type { DeliverQueue } from '@/core/QueueModule.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'read:admin:queue',

3
packages/backend/src/server/api/endpoints/admin/queue/inbox-delayed.ts
View File

@ -11,7 +11,8 @@ import type { InboxQueue } from '@/core/QueueModule.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'read:admin:queue',

3
packages/backend/src/server/api/endpoints/admin/queue/promote.ts
View File

@ -11,7 +11,8 @@ import { QueueService } from '@/core/QueueService.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'write:admin:queue',
} as const;

3
packages/backend/src/server/api/endpoints/admin/queue/stats.ts
View File

@ -10,7 +10,8 @@ import type { DbQueue, DeliverQueue, EndedPollNotificationQueue, InboxQueue, Obj
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'read:admin:emoji',

3
packages/backend/src/server/api/endpoints/admin/relays/add.ts
View File

@ -12,7 +12,8 @@ import { ApiError } from '../../../error.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'write:admin:relays',

3
packages/backend/src/server/api/endpoints/admin/relays/list.ts
View File

@ -10,7 +10,8 @@ import { RelayService } from '@/core/RelayService.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'read:admin:relays',

3
packages/backend/src/server/api/endpoints/admin/relays/remove.ts
View File

@ -10,7 +10,8 @@ import { RelayService } from '@/core/RelayService.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'write:admin:relays',
} as const;

3
packages/backend/src/server/api/endpoints/admin/reset-password.ts
View File

@ -15,7 +15,8 @@ import { ModerationLogService } from '@/core/ModerationLogService.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'write:admin:reset-password',

3
packages/backend/src/server/api/endpoints/admin/resolve-abuse-user-report.ts
View File

@ -15,7 +15,8 @@ import { ModerationLogService } from '@/core/ModerationLogService.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'write:admin:resolve-abuse-user-report',
} as const;

3
packages/backend/src/server/api/endpoints/admin/roles/assign.ts
View File

@ -13,7 +13,8 @@ import { RoleService } from '@/core/RoleService.js';
export const meta = {
tags: ['admin', 'role'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'write:admin:roles',

3
packages/backend/src/server/api/endpoints/admin/roles/create.ts
View File

@ -11,7 +11,8 @@ import { RoleService } from '@/core/RoleService.js';
export const meta = {
tags: ['admin', 'role'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireAdmin: true,
kind: 'write:admin:roles',

3
packages/backend/src/server/api/endpoints/admin/roles/delete.ts
View File

@ -13,7 +13,8 @@ import { RoleService } from '@/core/RoleService.js';
export const meta = {
tags: ['admin', 'role'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireAdmin: true,
kind: 'write:admin:roles',

3
packages/backend/src/server/api/endpoints/admin/roles/list.ts
View File

@ -12,7 +12,8 @@ import { RoleEntityService } from '@/core/entities/RoleEntityService.js';
export const meta = {
tags: ['admin', 'role'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'read:admin:roles',

3
packages/backend/src/server/api/endpoints/admin/roles/show.ts
View File

@ -13,7 +13,8 @@ import { RoleEntityService } from '@/core/entities/RoleEntityService.js';
export const meta = {
tags: ['admin', 'role'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'read:admin:roles',

3
packages/backend/src/server/api/endpoints/admin/roles/unassign.ts
View File

@ -13,7 +13,8 @@ import { RoleService } from '@/core/RoleService.js';
export const meta = {
tags: ['admin', 'role'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'write:admin:roles',

3
packages/backend/src/server/api/endpoints/admin/roles/update-default-policies.ts
View File

@ -11,7 +11,8 @@ import { MetaService } from '@/core/MetaService.js';
export const meta = {
tags: ['admin', 'role'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireAdmin: true,
kind: 'write:admin:roles',
} as const;

3
packages/backend/src/server/api/endpoints/admin/roles/update.ts
View File

@ -14,7 +14,8 @@ import { RoleService } from '@/core/RoleService.js';
export const meta = {
tags: ['admin', 'role'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireAdmin: true,
kind: 'write:admin:roles',

3
packages/backend/src/server/api/endpoints/admin/roles/users.ts
View File

@ -16,7 +16,8 @@ import { ApiError } from '../../../error.js';
export const meta = {
tags: ['admin', 'role', 'users'],
requireCredential: 'never',
requireCredential: false,
requireCredentialSecureMode: false,
requireModerator: true,
kind: 'read:admin:roles',

3
packages/backend/src/server/api/endpoints/admin/send-email.ts
View File

@ -10,7 +10,8 @@ import { EmailService } from '@/core/EmailService.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'write:admin:send-email',
} as const;

3
packages/backend/src/server/api/endpoints/admin/server-info.ts
View File

@ -12,7 +12,8 @@ import { Endpoint } from '@/server/api/endpoint-base.js';
import { DI } from '@/di-symbols.js';
export const meta = {
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'read:admin:server-info',

3
packages/backend/src/server/api/endpoints/admin/show-moderation-logs.ts
View File

@ -13,7 +13,8 @@ import { ModerationLogEntityService } from '@/core/entities/ModerationLogEntityS
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireAdmin: true,
kind: 'read:admin:show-moderation-log',

3
packages/backend/src/server/api/endpoints/admin/show-user.ts
View File

@ -15,7 +15,8 @@ import { notificationRecieveConfig } from '@/models/json-schema/user.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'read:admin:show-user',

3
packages/backend/src/server/api/endpoints/admin/show-users.ts
View File

@ -14,7 +14,8 @@ import { RoleService } from '@/core/RoleService.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'read:admin:show-users',

3
packages/backend/src/server/api/endpoints/admin/silence-user.ts
View File

@ -7,7 +7,8 @@ import { RoleService } from '@/core/RoleService.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'write:admin:silence-user',
} as const;

3
packages/backend/src/server/api/endpoints/admin/suspend-user.ts
View File

@ -19,7 +19,8 @@ import { QueueService } from '@/core/QueueService.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'write:admin:suspend-user',
} as const;

3
packages/backend/src/server/api/endpoints/admin/unnsfw-user.ts
View File

@ -6,7 +6,8 @@ import { DI } from '@/di-symbols.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'write:admin:unnsfw-user',
} as const;

3
packages/backend/src/server/api/endpoints/admin/unset-user-avatar.ts
View File

@ -12,7 +12,8 @@ import { ModerationLogService } from '@/core/ModerationLogService.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'write:admin:unset-user-avatar',
} as const;

3
packages/backend/src/server/api/endpoints/admin/unset-user-banner.ts
View File

@ -12,7 +12,8 @@ import { ModerationLogService } from '@/core/ModerationLogService.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'write:admin:unset-user-banner',
} as const;

3
packages/backend/src/server/api/endpoints/admin/unsilence-user.ts
View File

@ -6,7 +6,8 @@ import { DI } from '@/di-symbols.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'write:admin:unsilence-user',
} as const;

3
packages/backend/src/server/api/endpoints/admin/unsuspend-user.ts
View File

@ -13,7 +13,8 @@ import { DI } from '@/di-symbols.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'write:admin:unsuspend-user',
} as const;

3
packages/backend/src/server/api/endpoints/admin/update-meta.ts
View File

@ -12,7 +12,8 @@ import { MetaService } from '@/core/MetaService.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireAdmin: true,
kind: 'write:admin:meta',
} as const;

3
packages/backend/src/server/api/endpoints/admin/update-user-note.ts
View File

@ -12,7 +12,8 @@ import { ModerationLogService } from '@/core/ModerationLogService.js';
export const meta = {
tags: ['admin'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
requireModerator: true,
kind: 'write:admin:user-note',
} as const;

3
packages/backend/src/server/api/endpoints/announcements.ts
View File

@ -14,7 +14,8 @@ import type { AnnouncementReadsRepository, AnnouncementsRepository } from '@/mod
export const meta = {
tags: ['meta'],
requireCredential: 'never',
requireCredential: false,
requireCredentialSecureMode: false,
res: {
type: 'array',

3
packages/backend/src/server/api/endpoints/antennas/create.ts
View File

@ -16,7 +16,8 @@ import { ApiError } from '../../error.js';
export const meta = {
tags: ['antennas'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
prohibitMoved: true,

3
packages/backend/src/server/api/endpoints/antennas/delete.ts
View File

@ -13,7 +13,8 @@ import { ApiError } from '../../error.js';
export const meta = {
tags: ['antennas'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
kind: 'write:account',

3
packages/backend/src/server/api/endpoints/antennas/list.ts
View File

@ -12,7 +12,8 @@ import { DI } from '@/di-symbols.js';
export const meta = {
tags: ['antennas', 'account'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
kind: 'read:account',

3
packages/backend/src/server/api/endpoints/antennas/notes.ts
View File

@ -20,7 +20,8 @@ import { ApiError } from '../../error.js';
export const meta = {
tags: ['antennas', 'account', 'notes'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
kind: 'read:account',

3
packages/backend/src/server/api/endpoints/antennas/show.ts
View File

@ -13,7 +13,8 @@ import { ApiError } from '../../error.js';
export const meta = {
tags: ['antennas', 'account'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
kind: 'read:account',

3
packages/backend/src/server/api/endpoints/antennas/update.ts
View File

@ -14,7 +14,8 @@ import { ApiError } from '../../error.js';
export const meta = {
tags: ['antennas'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
prohibitMoved: true,

3
packages/backend/src/server/api/endpoints/ap/get.ts
View File

@ -11,7 +11,8 @@ import { ApResolverService } from '@/core/activitypub/ApResolverService.js';
export const meta = {
tags: ['federation'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
kind: 'read:federation',
limit: {

3
packages/backend/src/server/api/endpoints/ap/show.ts
View File

@ -24,7 +24,8 @@ import { ApiError } from '../../error.js';
export const meta = {
tags: ['federation'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
kind: 'read:account',
limit: {

3
packages/backend/src/server/api/endpoints/app/create.ts
View File

@ -15,7 +15,8 @@ import { DI } from '@/di-symbols.js';
export const meta = {
tags: ['app'],
requireCredential: 'never',
requireCredential: false,
requireCredentialSecureMode: false,
res: {
type: 'object',

3
packages/backend/src/server/api/endpoints/app/show.ts
View File

@ -13,7 +13,8 @@ import { ApiError } from '../../error.js';
export const meta = {
tags: ['app'],
requireCredential: 'never',
requireCredential: false,
requireCredentialSecureMode: false,
errors: {
noSuchApp: {

3
packages/backend/src/server/api/endpoints/auth/accept.ts
View File

@ -15,7 +15,8 @@ import { ApiError } from '../../error.js';
export const meta = {
tags: ['auth'],
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
secure: true,

3
packages/backend/src/server/api/endpoints/auth/session/generate.ts
View File

@ -15,7 +15,8 @@ import { ApiError } from '../../../error.js';
export const meta = {
tags: ['auth'],
requireCredential: 'never',
requireCredential: false,
requireCredentialSecureMode: false,
res: {
type: 'object',

3
packages/backend/src/server/api/endpoints/auth/session/show.ts
View File

@ -13,7 +13,8 @@ import { ApiError } from '../../../error.js';
export const meta = {
tags: ['auth'],
requireCredential: 'never',
requireCredential: false,
requireCredentialSecureMode: false,
errors: {
noSuchSession: {

3
packages/backend/src/server/api/endpoints/auth/session/userkey.ts
View File

@ -13,7 +13,8 @@ import { ApiError } from '../../../error.js';
export const meta = {
tags: ['auth'],
requireCredential: 'never',
requireCredential: false,
requireCredentialSecureMode: false,
res: {
type: 'object',

3
packages/backend/src/server/api/endpoints/blocking/create.ts
View File

@ -21,7 +21,8 @@ export const meta = {
max: 20,
},
requireCredential: 'always',
requireCredential: true,
requireCredentialSecureMode: true,
kind: 'write:blocks',

Some files were not shown because too many files have changed in this diff Show More